'''Masterkey Linux''' (or simply Masterkey) is a [[Live CD]] built on top of [[Slackware]] developed by Dr. Qin Zhou of Coventry University. It focuses on [[Incident Response|incident response]] and [[computer forensics]].

+

'''Masterkey Linux''' (or simply Masterkey) is a [[Live CD]] based on [[Slackware]] developed by Dr. Qin Zhou of Coventry University. It focuses on [[Incident Response|incident response]] and [[computer forensics]].

Whilst designed for use by students entering the field of Computer Forensics, Masterkey contains a diverse range of free and open source tools that both students, computer forensics professionals and system administrators alike can use.

Whilst designed for use by students entering the field of Computer Forensics, Masterkey contains a diverse range of free and open source tools that both students, computer forensics professionals and system administrators alike can use.

Whilst designed for use by students entering the field of Computer Forensics, Masterkey contains a diverse range of free and open source tools that both students, computer forensics professionals and system administrators alike can use.

Contents

Tools Included

In addition to standard unix/linux tools, a suite of editors, office applications and multimedia tools have been included, as well as the following specialised tools in the Masterkey Linux distribution:

Forensic Features

Disk partitions and USB storage devices found by Masterkey are mounted read-only automatically. Icons for these mounted devices are displayed on the user's Desktop. This facilitates access and prevents a user from accidentally writing to the devices and contaminating evidence.

Mounting and use of swap partitions is not allowed. This prevents a user from destroying any evidence present on swap partitions.

Root privilege. The user works with the system as a super user (administrator) so that tools requiring root privilege can be used straightaway.

Console login. The Desktop environment (graphic user interface) does not start automatically during bootup. This makes it possible to work with Masterkey on older computers. The user can choose to start either the KDE or Fluxbox desktops if they wish.